Resubmissions

17/11/2024, 02:02

241117-cf36nayeqm 8

17/11/2024, 01:58

241117-cdzqfsspem 8

General

  • Target

    Downloader.exe

  • Size

    5KB

  • Sample

    241117-cf36nayeqm

  • MD5

    706e22002777e3b0725eed259a326e49

  • SHA1

    e21d09552b53944f31854575aeb79337c710bb6c

  • SHA256

    beb906fef72f82d546983f42b2ac7a560739e07faa6d9b18f3ffdd6cf8876e2d

  • SHA512

    6574b1cb59131eed469956c70e301580b5e058dffc8004c1e3c00f8c5f98d90929d064680be23440003bcaec64cccb822f372388c3c69319534f5bbfad172630

  • SSDEEP

    48:67aXkBozwWBvslhIBo7Jf6NMM18He8lRThVZ6JqtMcp0b54tMgClXUgf3FCpfbNM:BVzwGwH7pRThVZKmMi0GClUqyzNt

Score
8/10

Malware Config

Targets

    • Target

      Downloader.exe

    • Size

      5KB

    • MD5

      706e22002777e3b0725eed259a326e49

    • SHA1

      e21d09552b53944f31854575aeb79337c710bb6c

    • SHA256

      beb906fef72f82d546983f42b2ac7a560739e07faa6d9b18f3ffdd6cf8876e2d

    • SHA512

      6574b1cb59131eed469956c70e301580b5e058dffc8004c1e3c00f8c5f98d90929d064680be23440003bcaec64cccb822f372388c3c69319534f5bbfad172630

    • SSDEEP

      48:67aXkBozwWBvslhIBo7Jf6NMM18He8lRThVZ6JqtMcp0b54tMgClXUgf3FCpfbNM:BVzwGwH7pRThVZKmMi0GClUqyzNt

    Score
    8/10
    • Download via BitsAdmin

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks